topic Re: ASA Software Version Confusion in Network Security

ASA Software Version Confusion

steve.frank — Mon, 11 Mar 2019 12:55:24 GMT

Per the new Cisco advisory cisco-sa-20080604-asa for PIX and ASA devices, I'm looking at some version updates on some of my ASAs. The Software Versions and Fixes portion of the advisory page at http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml

confuses me because it shows version that have a trailing portion that doesn't correspond to the download. For example, for the Crafted TCP ACK Packet Vulnerability in the 8.0 release it's fixed in 8.0(3)10. It's that "10" at the end that's confusing, because when I go to download the software, I see only 8.0.3ED with no 10. I've had an 8.0(3) deployed--how can I tell if it's 8.0(3)10 specifically if the download page doesn't reference that trailing version?

Thanks in advance,

Steve

Re: ASA Software Version Confusion

acomiskey — Wed, 04 Jun 2008 18:32:30 GMT

Easiest way would probably to do a

dir flash:

Then look for the image file, asa803-10-k8.bin.

Re: ASA Software Version Confusion

Farrukh Haroon — Wed, 04 Jun 2008 18:56:53 GMT

Hello

That "10" in 8.0(3)10 is the build number, if you show version shows only 8.0(3) then it means you are running the initial release of 8.0(3) (Sort of call it the first build). Then '"Interim Releases" go like 8.0(3)2 , 8.0(3)3 ....8.0(3)10 and so on....all this is integrated in 8.0(4)

At least this is my understanding....

Regards

Farrukh

Re: ASA Software Version Confusion

Farrukh Haroon — Wed, 04 Jun 2008 19:01:24 GMT

By the way, you can download 8.0.(3)12 at the following link:

http://www.cisco.com/cgi-bin/Software/Tablebuild/doftp.pl?ftpfile=cisco/crypto/3DES/ciscosecure/asa/interim/asa803-12-k8.bin&app=Tablebuild&status=showC2A

asa803-12-k8.bin

ASA Interim Release 8.0.3.12 25-APR-2008

14598144

Regards

Farrukh

Re: ASA Software Version Confusion

steve.frank — Wed, 04 Jun 2008 19:29:02 GMT

Fascinating that on the advisory under Affected version they have this:

Fix ASA software can be downloaded from:

http://www.cisco.com/pcgi-bin/tablebuild.pl/asa?psrtdcat20e2

which takes me to a page where the latest 8.0.3ED in my post above, no mention of other builds. Thanks!

Re: ASA Software Version Confusion

steve.frank — Wed, 04 Jun 2008 19:30:51 GMT

Oh, yes, of course. I didn't think of that, but it still doesn't tell me why the linked page from the advisory doesn't go beyond 8.0.3ED. 🙂

Thanks!

Re: ASA Software Version Confusion

steve.frank — Wed, 04 Jun 2008 19:31:42 GMT

Yes, thanks. That's consistent with IOS.

Re: ASA Software Version Confusion

steve.frank — Wed, 04 Jun 2008 20:04:26 GMT

Never mind, I see it now. Interim Builds is a hyperlink.

Thanks everyone.